$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft File: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json) Hash identifier: QRWcbUaZ4XF0RIQVaQpW8mtW0FUyQ75cL5Qv6T4U1Vk= Subject key identifier: 85:2D:6A:5F:E5:0C:6E:21:84:1F:84:92:48:3B:09:8D:6C:EC:7D:9A Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 Certificate issuer: /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Certificate serial: 035FA7C7F28A793B437E93FB1274BB20B2BD9C9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject info access: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft Manifest number: 0135 Signing time: Tue 12 Aug 2025 08:22:02 +0000 Manifest this update: Tue 12 Aug 2025 08:17:02 +0000 Manifest next update: Wed 13 Aug 2025 10:27:02 +0000 Files and hashes: 1: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: wRsA9G7fMRxRLwL25uiDVgKu/CFBPSFXNohStdTrcls=) 2: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: uIh+Oz5wiODIMg7enOUna4NRPwYVYruwibBcWxdlN6k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 13 Aug 2025 10:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5f:a7:c7:f2:8a:79:3b:43:7e:93:fb:12:74:bb:20:b2:bd:9c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Validity Not Before: Aug 12 08:17:02 2025 GMT Not After : Aug 13 10:27:02 2025 GMT Subject: CN=852D6A5FE50C6E21841F8492483B098D6CEC7D9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:64:a5:12:23:26:a3:10:2b:e1:fd:f3:09: e1:92:89:8a:23:b6:b4:14:c4:d6:29:0f:59:f6:d0: 2b:28:69:7d:2d:ab:e1:dc:66:74:85:cb:5c:03:e5: 01:8e:7c:59:0a:de:2e:bf:fe:bc:dd:eb:4c:7b:90: d8:11:96:9c:b9:73:c7:9e:65:54:8c:2c:02:89:fc: 3c:1e:36:75:56:3e:f7:7e:38:60:0d:91:ae:82:3d: 43:2c:f9:fa:5d:89:2a:f8:64:57:86:80:0f:89:8d: 59:81:1f:30:17:30:66:c6:fb:d9:5e:59:ba:d7:43: e7:e6:8f:ad:fd:56:9f:32:74:67:75:26:16:8c:16: 38:54:d1:26:81:97:f8:7e:67:4b:4c:f0:fd:24:f1: 1f:70:75:c1:10:6b:8a:d7:24:9e:a1:6d:30:9f:9e: 42:64:94:6b:82:e3:31:65:a8:20:54:39:ad:00:65: f1:03:5e:30:a4:76:6f:9a:79:63:75:fe:70:be:78: 6c:1b:4a:41:55:a0:f8:18:d5:1f:c9:16:7a:cb:8c: 2f:9a:a6:7c:f6:f7:43:18:93:a6:91:80:fb:a8:33: 45:48:26:43:b9:f0:9b:04:48:56:24:ba:7f:89:6c: 63:17:8b:63:6a:4c:e0:a8:64:b0:ab:bc:27:e6:69: c0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2D:6A:5F:E5:0C:6E:21:84:1F:84:92:48:3B:09:8D:6C:EC:7D:9A X509v3 Authority Key Identifier: keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:78:9c:85:06:2b:44:78:f2:76:2f:83:c6:ad:30:1a:4f:45: f3:17:7e:7f:e8:61:c2:aa:e4:e1:36:5b:a0:a3:8d:ba:c6:55: 4f:7b:eb:50:63:23:90:75:c8:c5:49:79:e5:d9:f9:c8:e7:28: 95:97:6d:1b:44:9e:6f:9c:40:f7:53:2b:d0:76:5d:ce:fb:61: 31:cc:b4:c0:fb:2c:2a:a3:63:b8:97:57:66:0b:e2:97:4a:fa: 00:be:90:8e:1e:cc:a4:44:da:65:9d:b2:65:60:48:f1:f9:91: 5e:76:2d:c0:f5:33:5d:98:e3:ea:c3:3f:36:95:67:0e:ba:f2: 43:31:6f:6f:8f:5e:73:12:9a:aa:1c:a7:f7:1c:f1:bc:6a:53: 8d:2d:d7:68:26:9b:fa:84:81:37:9c:7c:68:6f:59:48:6d:3b: 6b:3c:26:a8:7a:fa:33:80:bd:5b:9a:58:dc:4a:d5:68:c0:be: 4c:78:c7:4a:8e:fa:4c:d9:74:f1:cb:35:ca:71:8f:1d:3c:b7: 82:97:73:f5:a5:79:0e:29:e5:24:00:cf:7f:ac:ab:ec:9e:9f: 2b:7e:f8:94:83:e3:f9:61:e0:f3:7a:25:4e:81:ef:85:b4:4f: 23:5b:f9:74:c6:11:fa:b0:53:92:b0:66:22:78:cc:b2:44:d5: 0e:d7:d2:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA1+nx/KKeTtDfpP7EnS7ILK9nJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM2RkNCMzFGMkMzM0Y4RTU3MEQzQ0EwMjc1NUJDQzUx QjIzRUEwMTAeFw0yNTA4MTIwODE3MDJaFw0yNTA4MTMxMDI3MDJaMDMxMTAvBgNV BAMTKDg1MkQ2QTVGRTUwQzZFMjE4NDFGODQ5MjQ4M0IwOThENkNFQzdEOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2h2SlEiMmoxAr4f3zCeGSiYoj trQUxNYpD1n20CsoaX0tq+HcZnSFy1wD5QGOfFkK3i6//rzd60x7kNgRlpy5c8ee ZVSMLAKJ/DweNnVWPvd+OGANka6CPUMs+fpdiSr4ZFeGgA+JjVmBHzAXMGbG+9le WbrXQ+fmj639Vp8ydGd1JhaMFjhU0SaBl/h+Z0tM8P0k8R9wdcEQa4rXJJ6hbTCf nkJklGuC4zFlqCBUOa0AZfEDXjCkdm+aeWN1/nC+eGwbSkFVoPgY1R/JFnrLjC+a pnz290MYk6aRgPuoM0VIJkO58JsESFYkun+JbGMXi2NqTOCoZLCrvCfmacArAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhS1qX+UMbiGEH4SSSDsJjWzsfZowHwYDVR0j BBgwFoAUQ2/LMfLDP45XDTygJ1W8xRsj6gEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJI NGUvMC80MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNkZDQjMxRjJDMzNGOEU1 NzBEM0NBMDI3NTVCQ0M1MUIyM0VBMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJINGUvMC80 MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMHichQYrRHjydi+Dxq0wGk9F8xd+f+hhwqrk4TZboKONusZVT3vrUGMjkHXI xUl55dn5yOcolZdtG0Seb5xA91Mr0HZdzvthMcy0wPssKqNjuJdXZgvil0r6AL6Q jh7MpETaZZ2yZWBI8fmRXnYtwPUzXZjj6sM/NpVnDrryQzFvb49ecxKaqhyn9xzx vGpTjS3XaCab+oSBN5x8aG9ZSG07azwmqHr6M4C9W5pY3ErVaMC+THjHSo76TNl0 8cs1ynGPHTy3gpdz9aV5DinlJADPf6yr7J6fK374lIPj+WHg83olToHvhbRPI1v5 dMYR+rBTkrBmInjMskTVDtfSbg== -----END CERTIFICATE-----Generated at Wed Aug 13 02:18:54 2025 by rpki-client